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(54) Electronic postage meter installation and location movement system 



(57) A method for initializing a value metering 
device (2) includes delivering the value metering device 
to a user. The user establishes communications 
between the user and a remote data center. The user 
communicates to the data center identifying data asso- 
ciated with the user ordering the value metering device. 
The user communicates to the data center user account 
identifying data. The data center verifies the order iden- 



tifying data and the account identifying data as being 
valid. The data center upon determining that the order 
identifying data and the account identifying data are 
valid, communicates enabling data indicative of the 
physical location of the value metering device (2) for 
enabling the value metering device to operate. 
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In accordance with stilt another aspect of the 
present invention, the data communicated to the value 
metering device from the data center is stored at the 
data center. The value metering device is caused to 
establish subsequent communications with said data 5 
center and the value metering device communicating to 
said data center the physical location data (or other 
data) stored in the value metering device. The data 
center determines if said physical location data (or other 
data) has been correctly stored in said value metering w 
device. 

Reference is now made to the following figures 
wherein like reference numerals designate similar ele- 
ments in the various views and in which: 

15 

FIGURE 1 is a schematic diagram of a postage 
meter system incorporating the present invention; 
FIGURE 2 is a flow chart of the metering system 
shown in FIGURE 1 in a multi-accounting system 
environment; 20 
FIGURE 3 is a flow chart of the operation of the 
meter system shown in FIGURE 1 in determining 
whether the portable means (shown as a smart 
card) contains the proper location data or other 
data employed in generating digital tokens; 25 
FIGURE 4 consists of FIGURES 4A, 4B and 4C 
and is a flow chart of the first time a meter system 
such as shown in FIGURE 2, is initialized; 
FIGURE 5 consists of FIGURES 5A, 5B and 5C 
and is a flow chart of the process when the meter 30 
physical location is changed to a different origin 
postal code location or licensing post office; and, 
FIGURE 6 is a flow chart of the type of operation 
included in the determination made in decision 
block 236 of FIGURE 5B and 184 of FIGURE 4B 35 
which is helpful in the understanding of the opera- 
tion of the meter system in determining whether 
data received from the meter by the data center 
should be accepted as valid. 

40 

General Overview 

The electronic postage meter system shown in FIG- 
URE 1 includes an internal accounting system and a 
removable external accounting system. The external 45 
accounting system may be any suitable type of portable 
devices detachably coupled to the metering system. 
These include, for example, smart cards, ASICs, don- 
gles and other types of removably coupled devices 
which provide for accounting functionality for a metering so 
system. These may also include remote devices and 
systems which are detachably connectable to the 
metering system. 

The metering system involves multi secure 
accounting systems such as smart cards to provide ss 
accounting capability and functionality enhancement for 
the metering system. The term vault is used herein 
interchangeably with the term accounting system. The 



metering system is enabled to either utilize an internal 
secure accounting system only, an external secure 
accounting system only, or multiple secure accounting 
systems. The multiple secure accounting system meter 
has a secure internal secure accounting system, but 
can also accommodate an external secure accounting 
system. This allows a family of metering products to be 
developed and implemented that provides increased 
functionality and capability. 

Since portable devices are subject to loss and other 
security attacks such as theft or environmental prob- 
lems such as bending, rubbing, exposure to dust, liq- 
uids, sharp objects, etc., the maximum amount of funds 
that are stored within such a portable device may be 
limited. The limit may be a maximum consistent with the 
value metering system, for example, one hundred 
($100.00) dollars or any other selected amount. The 
internal secure accounting system may be a repository 
for larger amount of funds. Additionally, the portable 
device may be used in any of a large number of different 
metering systems, including Kiosk metering systems, 
thereby providing an increased functionality and utility 
to the meter system users. 

The metering system shown in FIGURE 1 includes 
an internal secure accounting system that may be phys- 
ically mounted in the metering system at the time of 
manufacture. This internal secure accounting system 
may be a smart card permanently mounted in the 
metering system or the smart card chip without the 
larger housing of the card itself. Such an accounting 
system itself may be housed within its own secure hous- 
ing such as is the case with a smart card chip or by 
means of a separate secure housing system. The smart 
card chip may consist of the smart card trimmed down 
to essentially a smaller version of the smart card. This 
may be manufactured by using a smart card plastic sub- 
strate that can be punched out from its carrier after the 
smart card chip is attached and thereafter the punched- 
out smart card chip mounted in the meter system. The 
punched-out smart card chip is like a normal smart card 
with most of the plastic substrate removed. The larger 
plastic substrate normally provides no functionality 
except to conform to the size requirements of the nor- 
mal credit card and to position the chip on the plastic 
credit card. Since the smart card chip is devoted to 
being permanently mounted internally within the meter- 
ing system, the smaller size is a benefit. That is, the 
punched-out smart card chip is never removed from the 
meter to be used in other non metering applications out- 
side of the metering system except as explained herein. 
This smart card chip is an integrated circuit housed in a 
plastic holder which is then connected to the printed cir- 
cuit board, ft should be recognized that the integrated 
circuit itself can be directly mounted to the circuit board 
if desired or packaged in other integrated circuit for- 
mats. 

The smart card chip may be permanently mounted 
within the appropriate printed circuit connector (plug 
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remote) or designed to ^^2^ 
meter system printed circuit board. ^ d *°" a "^ 
metering system accommodates an external secure 
£22 Accounting system (for example, smart card) 
« wen as the internal securing accounting system (for 
exanp e smart card) thereby providing agonal 
Sages. Thus, manufacturing of econom.cs of scale 
aTachfeved because identical or similar smart card 
chU or o^er devices are used for the external and the 
internal accounting system. 

The external secure accounting system when *" ■ 
smart Lr6 sized vault may be placed .n a card slot or 
detachable connector of the metering system. 
Foumart card, the card comes in contact wrth a spe- 
Z VZ card connector designed *^P£ 
That is. the metering system " F 2^£ ** 
sensing means such as a switch or other device to 
deSL presence of the smart card prior to app^ng 
voHmb and reset to the pins on the card and also to 
Tense ^ removal of the card or portable externa. 

a ^TSaS,un ti ng system approach provjc.es 
vario^aZntages induding higher funds retention 
Sage) for the internal secure accounting system, 
SS Veliability for the internal accounting system, 
SSf of me external secure accourtbns ^ 
Zi ftexfanty for multi functional^ connejon to the 
metering system such as ad slogans, "town circle 
SS- ^orization codes date transfer^ and «j 
tabT loading or software updates via the external 
secure accounting system connector 

Higher funds retention (storage) for the internal 
secure accounting system is enabled because paste 
funds and other value can be inserted nto the interrvU 
ac^SngTystem because it is permanently instated 
anTs less subject to being lost or stolen as « the case 
of a small externa, portable accounting system. Wgher 
Teriability for the internal secure accounting system 
r cSs because it is mounted in the metenr* un^nd. 
nrrt subject to harsh external environments (terrpera 

SlSSTSt). »«** TiSasTa 

tton that wear and/or contaminate the contacts as is a 
s^aJStSportabledevice. Portability of ^external 
sSHccoulg system enables externa, devices to 
be used in multifunctional tash.on such as a» 
accSng system (that is a different card o. ^ema. 
accounting system for each account) and gables the 
Sed other features and functionalities. Addrtio^ 
addi and other functional may ^uded^n the 
external accounting system such that, for example 
w^ere the external secure accounting system n, £ rr«rt 
card the system can be a cash card or a credrt . card 
Sh^dfttonally has postage accounting 
Finallv as noted above, it is possible to employ we 
Se nal vautt as a vehicle to load ad slogans, rate 
Ses a£ authorization codes and other ^rmafcon 
into or out of the metering system. These transfers ^may 
S loaSS under encryption control and/or be stored 



wrthin the metering system such as >" - PjJJ^ 
internal accounting system of the metering system 
where date storage may reside. 

Because the metering system employs mult, secure 
s accounting systems, an internal accounting system and 
5 Tina, accounting system. 

inH.iriPs a prioritization arrangement to aetermne 

accounting system. The metering system provides me 
SSy for a system where many external accounting 

is The metering system includes a portable device con 
n^a which enables funds debiting, token retr,e^. 

£S?aS and crediting of multiple accounting sys- 
tem? Sending upon the meter system conflation 
3Ee 2*« and type of secure 
ina svstem a selection criteria is used to choose me 
X^ounting system. ^.P^ft£E 
in the metering system shown in FIGURE 1 1 indude _an 
internal secure accounting system only, an external 
25 Sure accounting system only and an interna J and 
Motional) external secure accounting systems. In the 
SeSer^ere are both an interna, and optiona 
Sternal accounting system, a choice must be made as 
to which accounting system should be --J-^J 
so accountingsysten^arepresentinthemeterir^s 

Tne metering system shown in FK3 U R EJ accom 
modates the generation of digital tokens by both the 
SnafaS eternal secure accounting systems. Since 
Secludes the digrta. token and/or other info, 
« mation fas for example the information set forth in the 
proposed UB. Postal Service Specifications), it "f 0 " 
Sy to insure for avalid mailpiece to be prepared that 
^»e accounting system information is utilized n 

40 employed in printing the ma.lp.ece. This is necessary tor 
STmailpiece to properly be put into the -^'^J 
the mailer and so that the earner service may properly 

45 2 may include information which is in part based on the 

tion related to the meter user, hereina fter 
orinin Dostal code. Currently, postage meter secure 
aSS sySems which generate digital tokens are 
„ nSunSwith'namete^^ 

Counting system from being moved between meter 

^ Wen an indicia is printed, digits are generated that 
uflTtam. of the origin postal 
« nrinted as part of the indicia. These digital tokens are 
£ usS to verify the correctness a«J validity of per- 
S of Se digital indicia. Since historically, there .s only 
aTngHult (accounting system) and a single printing 
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engine and the system is not easily portable (as a smart 
card), meter location movement has not been as seri- 
ous an issue. With portable external accounting system 
meters, however, it is quite easy to move and use a port- 
able secure accounting system between many printing 5 
engines "bases" spanning different postal regions (ori- 
gin postal codes). The present system helps assure that 
the secure accounting system utilizes the correct postal 
code related data when generating the secure digital 
tokens or indicia. 10 

Moreover, in a metering system such as shown in 
FIGURE 1 that provides the capability of supporting 
more than a single secure accounting system, such as 
plural portable external accounting systems which may 
be from different origin postal codes, the meter system is 
operates to update the packed postal code (origin 
postal code with any desired additional data) and the 
postal check digit that may be used by the vault to gen- 
erate the secure digital tokens. The system shown in 
FIGURE 1 stores target origin postal codes and oper- 20 
ates to detect and transfer the origin postal codes to the 
secure accounting system to assure correct generation 
of the digital tokens. 

The digital indicia or digital token contains an area 
of secure information that is used to verify the correct- 25 
ness and authenticity of the digital indicia. For example, 
these digital tokens may include the vendor ID, vendor 
digital token, postal digital token, and an indicia check 
digit, in encryption systems of this type, in order to cor- 
rectly generate the indicia check digit, vendor digital 30 
token, postal digital token, the packed postal code and 
the postal check digit for the origin postal code may be 
used. The origin postal code is usually the code associ- 
ated with where the mai (piece will be sent from. This 
has also usually indicated where the meter is located. 35 
However, in products which separate the vault from the 
printing engine or "base," the vault can easily be moved 
from one origin postal code location to another. The 
packed postal code is derived from the origin postal 
code and it is used to represent the origin postal code in 40 
the calculation of the digital tokens mentioned above. 
The postal check digit represents the contribution of the 
origin postal code to the indicia check digit. 

Since the metering system printing module may be 
physically contained within the base portion, it is not as 45 
easy to transport (as a portable external accounting 
system, e.g. smart card) and less likely to be moved 
between postal code locations. If this unit is moved, it is 
expected the user would contact the meter system man- 
ufacturer so that the postal code location stored within so 
these systems may be updated. On the other hand, the 
external secure accounting system is quite easily trans- 
portable within a postal code region or between postal 
code regions. Furthermore, since in the present system 
there is no need for a correlation to be made between ss 
the external accounting system and the base and print- 
ing engine, any external accounting system may use 
any base with its associate removable printing module. 



To insure correctness of the token generation, a 
master set of the origin postal code along with its asso- 
ciated packed postal code and postal check digit are 
stored within the base printing module. The initialization 
of this information occurs the first time the meter system 
user contacts the manufacturer for the initial refill of the 
secure accounting system with postage funds. At this 
first refill, the meter system recognizes it needs all of the 
postal code related data and electronically requests the 
data be downloaded to memory. At this time, the system 
will update the currently active secure accounting sys- 
tem in the meter system. The active secure accounting 
system could be either embedded within the meter sys- 
tem (internal accounting system) or inserted into the 
meter system connector. Anytime, an accounting sys- 
tem is inserted into the metering system, the meter sys- 
tem operates to determines whether the secure 
accounting system possesses the same postal check 
digit that is stored as the master postal check digit 
stored in the memory of the printing module (or where 
ever else in the base this information may be stored). If 
the postal check digits match no update is made. This is 
done to minimize the number of writes to nonvolatile 
memory of the secure accounting system. The nonvola- 
tile memory in the meter system may have a maximum 
number of write cycles before the memory starts to 
degrade. This number correlates to the maximum of 
number debits made against the meter and conse- 
quently the maximum number of times that tokens will 
be generated. 

For meter systems configured with an internal 
secure accounting system, the update of the internal 
accounting system postal check digit are initialized at 
the time the data is received for the base print module 
initialization. The packed postal code could be updated 
in the secure accounting at this time as well; however in 
the preferred implementation, the packed postal code is 
transmitted at the time the postage funds and date of 
submission are transferred to the secure accounting 
system. The vault then uses the information it received 
prior to the debit as well as information received during 
initialization at the time the vault was inserted into the 
base unit housing. 

Reference is now made to FIGURE 1 . A postage 
meter system shown generally at 2, includes a remova- 
ble printhead module 4 within a housing 5, a base mod- 
ule 6 and a secure internal accounting system module 8 
and an external secure accounting system module 10 
which will be hereafter explained in greater detail. The 
accounting systems include an internal accounting sys- 
tems 8 and an external accounting system 10. These 
accounting systems account for the operation of the 
metering system and for the printing of postage value 

The print module 4 includes a printhead 12 which 
may be an ink jet printhead or other variable printing 
means. A printhead driver 14 provides the necessary 
signals and voltages to the printhead. A temperature 
sensor 16 is used to sense the ambient temperature. 
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Since ambient temperature changes the viscoerty d the 
o Sad ink, this information enables change oHhe 
Sgnailnd voltages to the printhead to maintain a con- 
start drop size. . 

A smart card chip 18 which contains internal non- 
volaSe Sorage receives encrypted command and con- 
£££ from the base unrt and provides e*rm*on 
o the ASIC 20 to operate *e P^^^nt No 

Ses Tnc the disclosure of which is hereby -ncorpo- 

mat it is to be imprinted). „^_ n „ r 9fi 

The base module includes a m.cro controller 26 
which is connected to operate the electrons postage 

An RS 232 port 27 is provided. The RS 232 pon * / 
is connected tothe micro controller 26 via a swteh 29 
whtoh?s operated under the control of the micro control- 
U£ I2*at either the RS 232 port 27 is enabled or 
trirn^emSis enabled. Should the RS232 port 27 be 

the metering system by way of modem d,rect .°°""r 
Si^ottw serial communication technK.ue suitable for 

M S°So U 2SSi 26 addttonal.y proves vari- 
ous Srtro. signals to operate the meter 

tho nrinthead 12 The micro controller 26 is operaiea 

The higher frequency 9.8 megahertz crystal clock is 
^lentheelectronic mete; ^-^SS 
ation and the lower speed 32 « ^ertz cryst^cto* 36 
fs used when the meter is in a "sleep 

^^^^^^^ 

JiJJScSi! to themicro controller 26 to pre** 
trailer 26 when the external source of AC operatmg 



power 50 is disconnected. 

Various electronic postage meter sensors are con- 
necteTto the micro controller 26 including envelope 
SS 52 which senses the presence of an envelopein 
a ^ envelope slot of the metering system, sh« home 
se^oTsA which senses the home position , of the shrrt 
m^JYmotor). a cam home sensor 56 wh,ch senses 
£ oZ which controls the envelope platen 

mLe^erTa carriage home sensor 60 which senses 

home sensor 58 which senses when print head 12 is at 
a mairtenfnce position, and a cover open sensor 57. 

ine micro controller 26 is additionally connected to 
a keTidTand an LCD Display Module 64. Thisena- 
„ wefa user to enter dam into the metenng system to 

view information shown in the display 64. 
" W The metering system 2 employs two ««m 

23 sySs securely maintain various refers asso- 

Sems provide for the capability of communicating 
SeTiSormatfcn and P.-M,"*"^ 
■Srm-on to add or remove 
3 c accounting J 

systems generates the J"**^ Tby the printhead 
nppded to be mpnnted on a manpiece oy 
i^rtionally the modules provide for encrypted 

Bon of the printhead module smart card 18 and the 
amounting system. Whenever there is a request by a 

age. or whenever else it .s desired, a ™^*J^ ft 
«nn occurs The accounting system authenticates that rt 
iTn^munStionwrthaprinthead module smart card 
STSch authenticating the other as being authen- 
«, Sand Slid meter rnanufarturer system^ Thereafter 
Inched communications are «aWed b*jjeen the 
SJeecure accounting system and the smart card 
Sri8 which is part of the printing system to provide 
secuS^Tessages are authorized uncoupled 
50 merges. This may be by way of a cryptographic cer- 

"e metering s^em 2 provides added^onajty 
and capability to the system by the employment^ the 
accounting systemsSandlO-Tn^nterna. 
55 smart card accounting system 8 is "nne^Dfte 
55 So controller 26 via a plug "^.^Jt 
tates removal of the internal smart card 8 sh ouH erfer 
nal inspection be required where the device is 
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inoperative. A 3.57 megahertz crystal dock 68 is con- 
nected to the smart card 8 and to the micro controller 
26. Additionally, the clock 68 is connected to the exter- 
nal smart card 10 via the external smart card plug con- 
nector 70. The micro controller provides a smart card 
sensor switch 72 detects the presence or absence of 
the external smart card 10. When the external smart 
card is detected as being present, the switch is con- 
nected to the micro controller 26 via the smart card 
power control circuitry 74 causing the micro controller 
26 to enable the external smart card power control cir- 
cuitry 74 to apply power to the external smart card and 
gate the crystal clock 68 to provide clock signals to the 
external smart card 1 0, both via the smart card connec- 
tor 70. 

It should be expressly noted that the system is con- 
figured such that it may be a system operated with both 
the internal accounting system 8 and an external 
accounting 10, with only the internal accounting system 
8 and only with the external accounting system 10. 
Moreover, the external smart card 10 is arranged so that 
it can be connected to other electronic metering sys- 
tems and provides a portable means for a user to have 
postal funds available for imprinting on a mail piece or 
tape on other than a specific postage metering system. 
However, even when connected to a different electronic 
postage metering system the same authentication 
between the external smart card 10 and the print head 
smart card chip 18 occurs. 

The system is designed with a priority arrange- 
ment. If no external secure accounting system, such as 
a smart card 10, is connected to the electronic postage 
meter system 2 the meter accounting functionality is 
provided by the internal secure accounting system 
smart card 8. This internal accounting system becomes 
the active accounting system for the metering system. 
However, if an external accounting system is connected 
into the system via the connector 70, the system will 
make the external accounting system, smart card 10, 
the active accounting system for the metering system 2. 

Connector 70 is a flexible multi purpose connector. 
The connector 70 enables connections of other types of 
smart cards such as card 76 which contains ad slogan 
information (alpha numerics and/or graphic information) 
card 78 which contains rate table information, and smart 
card 80 which contains authentication code information. 
It should be recognized that when each of these cards 
76, 78 or 80 is connected into the system via the multi- 
function connector 70 a self authentication process is 
effectuated between the smart card and the print mod- 
ule smart card chip 18 to ensure that valid cards and 
data are being employed. It may use the same encryp- 
tion and/or crypto graphic certificate techniques to 
ensure valid authentic and uncorrupted message com- 
munication. This system may be used for moving infor- 
mation and data into and out of the meter system 2. 

The information of the type stored on cards 76, 78 
and 80 are communicated from the card via the connec- 



tor and the micro controller 26 to the smart card chip 1 8, 
the ASIC 20 and is stored in the flash memory 24 or the 
smart card chip 1 8 internal memory. For those embodi- 
ments which employ a ROM rather than a flash memory, 
5 the information is written into the print module smart 
card chip 18. 

A refilling operation for the metering system 2 may 
be remotely implemented via the modem 28 or RS232 
connector 27. A remote connection is established via 

10 the modem 28 or RS 232 connector 27 to a remote data 
center. This enables bi-directional communication 
between the data center via the modem 28 or connector 
27 via the micro controller 26 to either the internal 
accounting system 8 and/or the external accounting 

is system 10 and to the print module smart card chip 18. 
The system is configured such that if an external smart 
card 10 is connected to the system via connector 70, 
the communications will be with the external smart card 
and not the internal smart card chip 8. It should be 

20 expressly recognized that other protocols can be imple- 
mented by use of the keyboard to designate which of 
the two accounting systems should be the active sys- 
tem for the purpose of recharging or other meter system 
operation. 

25 Whether communication is with the internal smart 
card chip 8 or the external smart card 10, the communi- 
cations involves the remote data center interrogating 
the internal or external accounting system to obtain 
necessary information such as the status of the funding 

30 registers (ascending register and descending register) 
other inspection information such as evidence of tam- 
pering, meter system serial number, internal resettable 
timer status and resets, and other information depend- 
ing upon the nature of the particular system. For 

35 recharging, the user may enter via the keyboard 62 a 
desired postage funding refill amount and upon suitable 
and successful interrogation of the active accounting 
system, the remote data center provides an encrypted 
recharging message which is communicated into the 

40 accounting system enabling refunding of the accounting 
system register with added additional postage value. It 
should be also noted that communications in this matter 
enables remote inspection of the metering system 
integrity and to upload or download other information 

45 relating to the meter system operation such as monitor- 
ing the operability and maintenance from the print mod- 
ule 4. Additionally, if various meter usage information is 
maintained in the system, this information may be 
uploaded to the remote data center. Moreover, the 

so remote data center provides a vehicle for downloading 
additional and new encryption key or keys into the sys- 
tem if so configured and provides the capability for other 
functionality and services such as meter usage profile. 
Moreover, at the time of remote meter resetting, a 

55 receipt may be caused to be imprinted by the print mod- 
ule as a receipt for the postage accounting system 
funds refilling. The receipt provides tangible evidence to 
the user of the date, time, amount and other pertinent 
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data of the postage accounting system refilling transac- 
ts receipt may include transaction , number and 
encrypted data such as a cryptographs certificate. 

in generating digital tokens or indicia, in certain 
instances and for certain postal authont.es. the d.gtel 
Sis required to contain information concernmg the 
Sl cSSof the electronic postage ofthemeter- 
^enf This may be because of ^^SSZ 
merits wherein a particularly meter is l-censed to be 
derated in a particular location, as for example wrth-n a 
pSar * ««e area, the originating jpoaa. code of 
me mailer. The metering system 2 accommodates h* 
Teouirement and enables the utili zat « «J" «J 
smart card from originating zip locatons other Jhan .«* 
thTS me license location for the metering system 2^ 
■me meter location information may also be important 
STerTh fs equired for use when metered mart must be 
* code or originating locat.cn of 

,h8 r'Salization of the meter, that is when the meter 
is put il service and rendered operable, the location* 
ispuiiniuoo -tared in the print module 

the metering system 2 is storea « ™> h ^ 
memory 24 or the internal memory of chip 18. This mor 
3£ be the originating zip code for the ma. eror 
^1? reaped location or other information. The nfor- 

^employed in imprinting a indicia or °-9^" on a 
Sail piece by print head 12. It is necessary that thed,g 
2 token generated either by the externa, smart card 10 
or the internal accounting module 8 ^"ch that we 
diaital token which contains originating postal code data 
fs accuse and consistent with the data stored in the 
fcshmSo^24or smart card chip 18imerr»l memory 
£Z time of inWalization. the originating .ocatsn 
data may be also stored in the internal accounting sys 
^ When an external accounting system or smart 

2^2^*^-* stored in the,las ^T e 

o v 24 or smart card chip 18 internal memory and the 
c mZZo S£n infor^on stored in the externa. 
sSTcSd ™ If there is a correspondence between 
tlete lo stored location information, the pnntmg of 
SgTand generation of the digital token or .nd.aa 
^oroJeed in the normal fashion with any other 
3S1 and processing that nw be mgg. 
However if the location information stored in the ftash 
nSr 24 or smart card chip 18 internal memory is 
insistent with the location informatfor , stored in the 
external smart card 10. the s^tem w.l I J* 8 ^ 
*hi<; time the location information in the external sman 
£££r£i over or alternatively may be put m a sep- 
arate memory location ^«y loca^ 

resDondence now exist between ui« 

ISmTtion stored in the flash memory 24 or smart card 



chip 18 internal memory and the location ^nformaton 
Sreo in the external smart card 10. Thus, when 
Sing postage and generating digital tokens an 
ajeement exists between the data 0««^2 
rnail oiece from the location information in the flash 
5 mtlo£?4or smart card chip 18 interna. "««ryand 
JroTtTk^tion information stored in the external 

^^andaspartofaroutinech^he.^ 

1S nal accounting system can be checked, ,J desirea 
whenever communications are established wrttyhe 
remote accounting center via the modem 28 or FKXaz 
comector27. Still further, should «be desired La special 
external smart card may be connected into the 
« KSTSerrogate and verHy varies info = 
stored both in the flash memory 24 and th^ .inter nai 

«™ Z together the system includes multi accounting 
Ste^rrsystemTs not a 
system, a further determination is made at 86 rf^esys 
30 S^Tan internal vault system. If the system is not an 
nternaf vault system, the system must be an externa, 
vault only system. Accordingly, at 88, the system warts 

35 min*Tto be already present). ^^^cS 
external vault for all accounting and for other secure 
Smsat 92. Should theexternal vault * 
^sho^n at 94. a determination is then made if an inter- 
nT^Ai svstem is at 86. If no internal vault is present. 

2 and a fatal error is displayed at 98 in the display. 54. 
Thfmetrsystem is rendered inoperable for pr-ntng 
postage and other operations requmng a secure 

„ ^d^nation^ 

vaul svstem at 84, a further determinat.cn .s made at 
^ iS Lte are present in the system. If two vaults 
are preSnT the system will use the external vault as 
SrcTat 92. Thus, where two vaults are present Jie 
» svSem always defaults to using the external vault If a 
SIS is made that two vaults are not present in 
ITsylem at 100. the operation continues to decision 
Sc sfaTpreviously noted. If a determination is made 
Vernal vault is present at 9* the system uses 
« Se internal vault as shown at 102. Th.s would also be 
* SSsef7omdecisionbox86whereadeter^ 
made if the system is an internal vault system. 

As can be seen from the above, when the system is 
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powered up. the meter system 2 always defaults to 
operation using the external accounting system or vault. 
If, however, the external vault is removed at any time 
during operation, the system changes to utilization of 
the internal vault when the external vault is removed. If, 5 
on the other hand, the system has only an external 
accounting system or vault and the vault is not present, 
the system waits until an external vault is inserted into 
the system to commence operation. Further, if the sys- 
tem is an internal vault only system and a vault is not w 
sensed as being present, the system will display a fatal 
error and will not operate. 

Reference is now made to FIGURE 3. A vault is 
inserted into the meter system at 122. This may be an 
internal accounting system inserted at the time of man- 15 
ufacture or an external vault inserted at any time during 
use. Additionally, should a different vault be inserted 
into the system as a substitute for the internal vault this 
procedure will also be followed. Additionally, the proc- 
ess is followed during power up of the metering system. 20 

The postal code and postal check digit or other 
information is read from the vault at 124. At 126, it is 
determined if this postal code and postal check digit or 
other information matches with the postal code and 
postal check digit and other information stored in the 25 
meter system. Information is stored in the meter system 
printing module in flash memory 24 or printing module 
smart card chip 18 internal memory. If the information 
matches, the system continues initialization and opera- 
tion at 128. If the information does not match, the vault 30 
(accounting system) and printer printing module 
attempt to authenticate each other at 130. If it is deter- 
mined at 132 that the accounting system module and 
the printing module are each valid and have authenti- 
cated each other, the postal code and postal check digit 35 
or other data stored in the printer module flash memory 
24 or smart card chip 18 internal memory are written 
into the vault at 1 36. The meter system continues its ini- 
tialization and operation at 141. 

If it is determined at 1 32 that the accounting system 40 
and printing module are not valid, that is, they have not 
authenticated each other, a fatal error message is dis- 
played in the display 64 and the system does not oper- 
ate at 134. Overview Of System - Initialization and New 
Physical Meter Location 45 

An automated meter system installation processor 
is performed remotely from the Customer site rather 
than at the point of manufacturing or at the district sales 
office. The system simplifies zip code initialization and 
update as well as facilitates the process to be per- so 
formed in a more timely fashion. The system facilitates 
remote electronic initialization or update of the printable 
zip code , the packed postal code and the postal check 
digit into a digitally printing meter at a customer site. 
The installation system may include a data center host ss 
computer, a meter and a communication channel 
between the two devices as well as the messaging 
exchange used to provide the needed information to 



perform the zip code initialization or update. 

The printable postal code is often a necessary com- 
ponent of a correct indicia. The packed postal code and 
the postal check digit may be used in the generation of 
digital tokens that are also printed in the indicia. These 
tokens are used to verify the correctness and the 
authenticity of the indicia. 

b) Replacement of part of metering subsystem by 
Customer; 

c) Customer moves from one accountable post 
office location to another; 

d) Post Office realigns existing accountable post 
offices; and 

e) Zip code data initialized incorrectly due to admin- 
istrative error. 

Each of the above conditions fall into two major classifi- 
cations: 

1) Zip code updates that may by originated by the 
meter 

2) Zip code updates that may be originated by the 
Data Center. 

The present system accommodates both allowing 
for zip code initialization and update to originate from 
either the meter or the Data Center systems. 

Zip code updates Originated by the meter. In the 
two following situations, initial use of the meter and 
replacement of part of the metering system, the meter 
determines that zip code data is needed and conse- 
quently initiates the request for zip code data update. 

Initial use of meter - "Zip code Installation." 

When a meter capable of zip code queries and 
updates connects to a Data Center system, the meter 
does a local verification to determine if the zip codes are 
present in the system. If the zip codes are not present, 
the meter initiates a message exchange requesting all 
zip code related data needs initialization by the Data 
Center. Upon receipt of the zip code initialization 
request, the Host transfers the zip code related data to 
the meter. 

Replacement of part of metering subsystem. TTie 
metering system may be a single system or a distrib- 
uted system where data may be stored in one part of 
the meter system and utilized by other parts of the 
metering system. The metering system disclosed in 
FIGURE 1 is a distributed system where the zip code 
data are stored in the "printing subsystem", but used by 
both the "printing subsystem" and the "accounting sub- 
system". 

Since the printing subsystem may be replaced as it 
is in the meter system, it is possible the zip code data 
will need to be re-initialized due to this condition. When 
a print module is replaced, it will look like an "initial con- 
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dition" to the meter resulting in the meter requestmg zip 
code related data update as outlined above. 

Zip code updates originated by the Data Center. In 
the three following situations, the Data Center is aware 
tat the connecting meter needs zip code , date upcte te 
and consequently initiates the transfer of the necessary 
data. In all of the following srtuat.ons, the Date Center 
maintains an "atfvrty log- for each "f^™^ 
known to the Data Center system. At connect time, the 
S tag is checked to determine whether or not z, P 
code download is needed. 

It should be noted that the activity log could also 
f.ag instances of a "first-time" connection by the meter 
as de^ibed above, however, replaceable meter sub- 
sJste^Sonents might for certain systems fall out- 
sS oTtne capabilities of the activity log. Consequently 
2 f mechaSnt are provided to deal wHh the cases of 
first-time "meter initialization" separately^ 

Customer moves from one post off-ce ■ocat.onto 
another - "Meter Movement" (new meter physical loca- 
SjSl-" • Werner moves from one a^untaWe 
post office to another, the Customer will contert the 
Seter manufacturer to provide nrtta. Jon of ta pen* 
ing move. Once the Customer notrt.es Prmey Bowes, an 
indication is set against the met* 
that Customer. Notification may take the *mOtbK 
ironic notification via an on-line system embedded in 
he meS or person to ^^^T^l 
oerson to person via a telephone interface the cus 
Sr assistance representative will set the .ndication. 
7e ndSS»n acts as a semaphore or flag ind.cat.ng a 
need to update zip code related data for the Date 
Ser the next time the given serial number calls into 

the Data Center. _ _^ 

i the meter connects with the ^te Center, the 
Data Center will check the "activity log" to ascertain 
Aether or not the semaphore flag is set. If it is setind, 
eating zip code related data needs to be updated a 
meslge exchange between the meter and the Date 
Snter'wil. occur. This message 
as follows: 1) Retrieves the current z.p code data. and2) 
UDdates the zip code related data, as necessary. When 
meterinnects. there are three possible condrtions 
hat need to be verified prior to zip code update. The 
as follows: 1) Meter connected to correct 
Base Unit; 2) Meter connected to .ncorrect Base Unrt, 
wftTsame Zp code date; and 3) Meter connected to 
incorrect Base Unit with different zip code data 

^he meter shown in FIGURE 1 and as explained 
herein has three primary subsystems i.e. the printing 
System" the 4se subsystem" and the "accenting 
suosystem". For each base there is a single priming 
Subsystem For some base and priming subsystem 
coSTons there may be none, one or many distinct 
accounting subsystems. Furthermore, for cases >of one 
or many accounting subsystems, the subsystems may 
TesTe within the base or external to the base subsys- 
in. For instances where the accounting subsystem 



resides external to the base subsystem, some provision 
S tebe^ovided in order to ascertain, if the receding 
bSe subsystem is the correct base to rece.ve the zip 
Se La delated to this Customer. There ,s a message 
s ^ Lima V0«* swe™ useti to rnw*™ 
probability of incorrectly updating the z.p code data in 
the wrong base subsystem. 

After the initial dialog between the Date Center and 
the meter, the Host queries the meter z P 
,o code date, accounting registers and acx^ ccde. Once 
received, the Host compares the ™*»**^* d ** 
with the expected date. If the date is different than 

zto code data. The Data Center will assume this base is 

number. If the received data matches the expected 
Sate the Data Center will transmit the associated date 
to Ji'e meter. Once received, the meter will provide a 
So^t vto a display. The prompt wi., be ^ * «■£[ 
,0 ta User as to whether or not the z.p code data sent 
20 J^the Data Center should be used to 

base If the zip code data is accepted by the User tne 
Ste'r "ip cJe data will be updated. If the User selecte 
Z to ac^Sthe zip code date, the base wi. disregard 
25 ta zip code update. Once the User responds to the 
pror$. the base will send a status back to theDate 
CeS indicating the state of 
request. Once the status is served by the Date Center, 
ta Data Center will clear its local semaphore comply 
so tag the zip code update transaction, ft should be noted 
tat tt dUue wrih the user via the display canoccur 
after the meter "hangs up" from the data center. Ttejs 
ta preferred since it reduces the amount of modem 
Snnect time between the meter and the date ceje • 
35 The accounting registers are retrieved in order or 
theD^aCerrtertosnap-shotthecurrertmon^availa^ 

Se and current money spent in the system that ^ the 
"atus of the ascending and descending registers. Since 
*1he United States, presently money or value spent 
40 priortother™emustbeaccou^^ 

me post oHice and remaining will be accounted for to 
*e nw accountable post office. The meter access 
code or other cryptographic technique is used as a 
Sure signature verifying the internal registers are cor- 
45 red for that meter serial number. 

Post Office realigns existing accountable Post 
Offices. Over the life of the meter, it is posstole that the 
United States Post Office will realign t^ccountaMe 
Post Offices. For meters that are effected by ta> 
so change, a method must exist in order to update the new 
P^c^e.Thesystempr W Klesasystemwh*ebythe 

nWmanufectorerisaWetoinit^ 
toad either before or after a Customer invoked postage 
Ends refill, remote meter resetting. Furthermore .when 
55 realignment occurs, it has required the r ^ufacturers 
Customer Service to intervene in order to update the 
Customer's meters. The present system ehmina es tat 
need and performs the entire operation electronically. 
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Zip code data initialized incorrectly due to adminis- 
trative error. This condition is treated as outlined in 
above where there is a realignment of existing account- 
able post offices. 

Orderly Transfer of Zip code Data. Whether the zip 5 
code update originates from either the meter or the 
Data Center, a series of message exchanges occur to 
transfer the data between the systems. The initial dialog 
exchange provides the meter identification, meter serial 
number and an account number associated to the given 10 
meter to the Data Center. If the Data Center determines 
the meter requires zip code update, a secondary query 
by the Host requests the current zip codes stored in the 
meter. The accounting system query is made in order to 
determine the following: 1) Accounting subsystem is in 15 
the correct base subsystem; and 2) Zip code data may 
be updated from past message dialog, but line lost prior 
to status returned by the base subsystem. 

The metering system shown in FIGURE 1 provides 
a mechanism for the entry of any data known to the 20 
Customer, but not known to the meter at the time the 
meter arrives at the Customer site. For example, data 
known by the Customer includes order number and 
remote meter resetting system account number. The 
meter serial number and meter identification will have 25 
been initialised prior to shipment to the Customer. 

If the data provided in the message exchange is not 
correct, the Host will provide an indication to the remote 
Data Center that an installation could not be performed 
for some particular reason. The reason will be provided 30 
by the Data Center, given the Data Center is able to rec- 
oncile the cause of the failure, the meter will provide 
some indication via a Customer interface (display) in 
order to facilitate orderly correction of the problem, 
where possible. Upon correct entry of information, 35 
another connection will need to be made to the Data 
Center to complete the installation process. 

By defining operational parameters from the Cus- 
tomer site, the manufacturer can lower operating costs 
associated with meter initialization and post manufac- 40 
turing handling. Also, by performing some meter system 
initialization at the Customer site, the manufacturer can 
provide delivery of the meter eliminating a manual step 
in the process. 

When the Customer receives the meter system, 45 
there is no postage in the meter system. This will 
require the Customer to invoke a refill session to obtain 
postage funds. At the time of this first refill, the meter is 
able to detect that parameters are not present in the 
system that are needed to property print an indicia, so 
Upon connection to the remote meter resetting system 
data center, the meter requests the initialization of the 
needed data. When the data is received, the meter is 
then prepared to properly print an indicia. Conse- 
quently, the meter becomes enabled to print. To print a ss 
valid indicia, digital tokens, from the vault, the postage 
amount, optionally the date of submission and the origin 
postal code usually must be printed. However, as cited 



above, many encrypted indicias that include digital 
token may have all forms of different data and in differ- 
ent forms utilized or not utilized, as the case may be, for 
that particular system. Since the meter's destination is 
not known at the time of manufacturing, a mechanism is 
provided to initialize the origin postal code so that valid 
indicias can be printed. 

Since the User may not know the origin postal code 
of their licensing post office, it would be error prone to 
permit the Customer to enter the data. This and other 
potential sources of errors are overcome as explained 
below. 

In order to print a valid indicia, in certain systems a 
postage vault capable of generating digital tokens, may 
need a mechanism to set and maintain the time of day 
as well as a calendar and the origin postal code. This 
data may be needed to generate a valid indicia. Since 
the meter's destination is not known at the time of man- 
ufacturing, a mechanism is provided to initialize the 
meter with the necessary data to support valid indicia 
generation. 

For the metering system described herein, no han- 
dling at the district center or office of the manufacturer is 
required, thereby reducing manpower needed to proc- 
ess the meter as well as the time from order placement 
to order shipment. Once ordered, the packaged meter 
may be sent directly to the Customer. However, the ori- 
gin postal code still must be initialized before the meter 
may be used by the Customer. When the meter is pow- 
ered on, the Customer will be able to perform funds 
retrieval, meter setup, print maintenance including print- 
ing a sample pattern to verify the print head is opera- 
tional as well as invoke a refill with the remote meter 
resetting system. However, the Customer will not be 
able to frank an envelope. 

When the Customer performs the refill, the meter 
requests the data to be transmitted from the Data 
Center to the metering system. Since for low cost meter 
systems, it is expected that the Customer will have 
ordered the meter via a telemarketing center, the manu- 
facturer telemarketer will have taken the necessary 
information to determine the licensing post office for that 
Customer. This information will be stored in a Data 
Center data base so that when the Customer makes the 
first modem contact with the manufacturer, the data is 
available for transmission to the Customer's meter. 

Typically, the Customer would request funds at this 
time, however, the meter, if desired, provides the capa- 
bility to invoke a "zero" dollar refill so that the meter can 
receive initialization data without requesting funds. Only 
when the meter detects the condition that it has no zip 
code will it request the information be transferred. Once 
the origin postal code information is received, the meter 
will update a semaphore or flag to indicate the data is 
present. The length of the data is also known since it is 
transmitted along with the origin postal code informa- 
tion. Upon receipt of this information, the length is 
expected to be non-zero. Since the origin postal code 
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data is now present in the system, the meter is ^paWe 
of printing postage if all the other necessary condrt,ons 
are present. 

^ ^ ™ .notation SflU H P ftP* "Meter MQV iL 5 
n^nf System 

Reference is now made to Figures 4A. 4B and4C. 
A meter arrives at a user site at „ 
the ink cartridge or other inkmg system. _* 
and any other supplies that are requ.red to be .nstalled 
^the metering system 2 such as batter.es and any 
'^g malerL hoiding the printing 
SL portions of the meter in placefor sh-pment The 
meter is thereafter powered on at 164. Tne ™ 
Tmers via the keyboard or modern^ aremote ^mete 
resetting account number assoaated with the user at 
166 Tnis is an account number that would be pre- 
eSbltehed by the user prior to operating the meter and 
?SgnSSthemeterrnanufarturertothec^omer 20 

. flr tho mftter arrives at the user site. The user enters 
SSSSSJSSr at 168. This meter order number 

ordeS S tne user and can also be included .n the » 

«h the physical arrival of the meter ^The 
u«r then verifies the manufacturer remote resetting 
ohone nlmber at 170. This is accomplished by compar- 
T*eZ«Lr which appears in a meter system dis- 
Sl y 64 to a list of numbers provded by the meter so 
Sufacturer. This is for meters that have phone num- 
^e-installed. alternately, the phone nur*er can 
be entered directly by the user v.a the 
meter phone number is incorrect, the phone number* 
corrected by the user at 172. The correction can .nvolve 35 
StSLes such as using 9 to get an outside 
Sne as is common in many office faalrt.es us.ng 800 
numKrs, Watts lines and the like. If the user verrf.es the 
Shone number is correct at 170 or after correcting Je 
phone number at 172. the user thereafter^ presses^ « 
meter funds refill key at 174. The user enters the funds 
Teftamount and presses enter to initiate a d*..ng at 
! 76 The system retrieves the meter senal nurnberfrom 
he active vault inthe system at 178. The meter and the 
dataTerter negotiate the establishment of commun,^ « 
ST link at 18? Thereafter, the data center ^errf.es the 

aborts the phone call at 186 and an error message .s 
^SSTJSLm with a meter transferring 
inspSon^ata to the remote meter * 
center at 188 and thereafter the meter requests from the 55 
£ enter the origin postal code related ;d*nJ*J 
transferred to the meter at 190. Th.s or.g.n postal code 
reS iata. discussed above, is written into the artrve 



vault of the system and also into the pnnt module smart 
Schip ISinternal memory for print m^uleforaflash 

mlmonT 24 The data center transfers the or.g.n posta 
SS£J- Postal code and the postal che* dig* 
at192 A determination is made at 194 if the reW 
amount is greater than 0. If the amount is not greater 
»T?*e meter aborts the phone call and returns to 
Tmai operation at 196. H the refill amount isgreate 
than 0 the meter sends the access code and reH 
Sum to the data center at 198. The data cerrte, after 
verifying the access code, refill amount 
7ccS numbers associated with the user ^ a ref » 
Se to the meter system at 200. A determ.nat.on .s 
Sde at 202 if the refill code from the data carter .s 
S If the refill code is okay, thefunds are 
descending register of the meter system * 2£ IHhe 
refill code is not okay, an error message s d.splayed m 
Ihe meter display 64 and the phone call .s aborted at 
206 

After the funds are added to the descending regis- 
ter aT204, the meter clears the flag for ^catog £e 
need for origin postal code data at 208. Th.s meter flag 
Site opeLonof the meter system unt.l cleared The 
irate^niBaJization continues at 210. This ' urt J^V" m '^ n j 
Son involves normal electronic 
operation such as clearing memory locations and tne 
23?10. The meter is then enabled for normal meter 

«*. » ar* 5C. once a meter 
has been moved to a new location, the user contacts .me 
manufacturer meter help line via telephone at 214/Th.s 
Xhone contact can, in fact, be initiated prior to the 
p5S. move of the meter, if desired. TJmjmt** 
ties himself via the users remote meter resettng 
account number, meter serial number, and customer 
SrlmbeTand indicates the meter is moved orw.. 
be moving to a new location at 216. It shouWbe recog 
nized that the user may identify their name and address 
mother data or parts of the data and the data can be 
IS from a Hnk data storage at the data center of 
£ mfnufacturer. The user indicates the « 
postal code and the new meter location at 218^ The 
Slcturer then determines the new ong, potfa 
code or new licensing post off.ce at 220. The .meter 
ntnufacturerhel^^ 

Ser data center that an origin postal code downlc^l 
message needs to occur with the meter system in ques- 
Ai this point in time, the manufacture data 
centSfs^ndH^ 

SgTat the next communication with the meter systera 
Se help desk then instructs the customer or user to 
u) and do a "0" funds refill H no postal funds are 
S£ oTan active funds refill operation if funds are 
neSS to £ added to the descending registerof *e 
meter system at 224. The user thereafter, connects the 
SS to the telephone connector "if not con- 
SS The user then verifies the remote meter 
hefting account number and telephone number at 
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226. The user presses the refill key at 228 and enters 
the refill amount and presses "enter" to initiate dialing at 
230. The meter then retrieves the meter serial number 
from the active vault at 232 and the meter and data 
center negotiate the communications line connection at 5 
234. 

The data center verifies if the data is okay at 236. If 
the data is not okay, the data center aborts the call at 
238 and an error message is displayed in display 64 at 
240. If the data is okay, the data center checks to deter- 10 
mine whether any data needs to be downloaded to the 
meter at 242. A determination is made at 244 if any data 
transfer is required to the meter. If no data transfer is 
required, the meter transfers inspection data and refill 
requests if needed at 246. is 

If, however, the data transfer is required, the data 
center transfers data to the meter including the new 
postal data code, packed postal data code and postal 
check digit at 248. A determination is made at 250 by a 
meter user via the display whether to accept the new 20 
origin postal code. If the meter user accepts the new ori- 
gin postal code, the system updates the print module 
master record containing meter location data at 252. If 
the user does not accept the new origin postal code, the 
program branches back to block 246 where the meter 25 
transfers inspection data to the data center and process 
a refill request if needed, as previously noted. Thereaf- 
ter, the meter is enabled to resume normal operation at 
254. 

If, however, the meter has updated the print module 30 
master record at 252, the system authenticates the 
active vault at 256. The meter writes the new origin 
postal code data to the active vault at 258. The program 
then loops back to blocks 246 and thereafter 254 to 
resume normal meter operation. 35 

Reference is now made to FIGURE 6. The data 
center received the meter serial number, remote meter 
resetting system account number and order number 
from the meter at 260. The data center retrieves the 
meter order number and the user remote meter reset- 40 
ting system account number from the manufacturers 
data base. It should be recognized at this point in time 
the manufacturer data base does not have stored 
therein the meter serial number and receives this infor- 
mation from the communication link with the meter at 45 
262. A determination is made at 264 if this is an initial 
first time contact. If not, the data center checks whether 
other meter transactions are pending such as origin 
postal code download or download or funds withdrawal 
at 266. If the contact is determined to be an initial first so 
time contact a further determination is made at 268. tf 
they do not match, the telephone call is aborted at 270 
and an error message is displayed in the meter system 
display 64 at 272. 

If the received order number and remote meter 55 
resetting number match, the received meter serial 
number is recorded in the master data base at 274. This 
links the specific meter to the user remote meter reset- 



ting account number and to the meter order number. 
The data center then requests whether the meter has 
any pending actions request messages at 276. 

It should be noted that any time the meter estab- 
lishes communication with the data center and the data 
center has a preexisting download message flag set for 
the particular meter in question, the data center tracks 
during the next communication with the meter following 
the download message that the data was correctly 
downloaded to the meter. This is accomplished by com- 
paring a meter upload message with the data to the 
download message data sent to the meter during the 
previous communication. 

By employing this technique of a verification of the 
accurate download of data, various problems are 
avoided such as downloading the wrong origin postal 
code into the wrong printing module subsystem since 
external vaults may be utilized and a meter user may 
have previously called a data center to indicate a meter 
move and thereafter use a external vault and yet a dif- 
ferent electronic postage center meter system. By ask- 
ing the customer to accept or reject the download 
message in displaying the new origin postal code, this 
problem is further avoided. 

While the present invention has been disclosed and 
described with reference to the specific embodiments 
described herein, it will be apparent, as noted above 
and from the above itself, that variations and modifica- 
tions may be made therein. It is, thus, intended in the 
following claims to cover each variation and modifica- 
tion that falls within the true spirit and scope of the 
present invention. 

Claims 

1. A method of initializing a value metering device, 
comprising: 

delivering said value metering device (2) to a 
user, said value metering device having com- 
munications capability (28); 

causing said value metering device (2) to 
establish communications with a remote 
data center; 

said user entering into said value metering 
device order identifying data associated 
with said user ordering said value metering 
device; 

said value metering device communicating 
to said data center said order data; and, 
said data center communicating enabling 
data for enabling said value metering 
device to operate, said enabling data indic- 
ative of the physical location of said value 
metering device. 

2. A method of initializing a value metering device as 
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is 
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defined in claim 1 further including communicating 
5S3I number data associated with sari vaiue 
metering device to said data center. 

A method of initializing a value metering device as 
^ned in ciaim 1 or 2 ^f""^"^ 

S^saidva.uemetenngdevice.sapostaQe ^ 
metering device. 

A method as set forth in any one ofclairns 1 to 3 
wherein the enabling data ■ a z.p code. 

A method of initializing a value metering device as 
defined in Claim 1 further comprising: 

said user entering into said value metering 
olle user account identifying data together 
S iid order identifying data associate wtf, 
sari user ordering said value metenng dev.ce 
£ vlue metering device commun.cat.ng to 
S Sta center said order data and sari user 

data and said account identifying data as be.ng 

SSS center upon determining «-d 

ma data are valid communicating to said value 
Spring device enaWingdatafor enabling said 

data indicative of the physical location of said 
value metering device. gs 

6 A method of initializing a value metering device as 
MMin claim 5 further including sari value 
mSg dev ce communicating serial number da a 
a2Sedw«h said value metering dev.ce to sari ^ 
data center. 

metering device. 

8 A method of initializing a value metering device as 
7eSiinC.aim5.6or7.furthercompris.ng. 

sari data center upon determining thai i said 
L data are valid communicating to sari value 
Suemeteringdevicetooperate^denaW^ 
data including data relating to the physical 
location of said metering dev.ce; 



26 

displaying sari physical location data in a dis- 
olal of said value metering device; and 

said user operating sari value metering i device 
to accept sari pr^cal location data tor storage 
in sarivalue metering dev.ce if sari physical 
location data is correct. 

9 A method of initializing a value metering device as 
' defined in Claim 8 further compnsing: 

storing sari physical location data at said data 

said valuemetering device to establish 
SUnt communications with sari data 

Rvalue metering device communicating to 
sari data center said physical location data 
stored is sari value metering device; ^arri 
said data center determining * sari Physical 
5S«on data has been correctly stored « sari 
value metering device. 

10. A method of relocating a value metering device, 
comprising: 
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causing said value metering device to establish 
ctmmun^tions with a remote data center 
saS user entering into said "*JJ 
device order identifying data associated with 
£ usS ordering said value metering device 
and user account identifying data; 
sari value metering ^ce commun.cating to 
said data center said order data and sari user 

Sa Jri said account identifying data as being 

sari 'data center upon determining that sari 

inn data are valid communicating to sari value 

a new physical location of sari metenng 

Sing said new physical location data in 
said value metering display; 
saS Ser operating said value metennj .device 
to accepted new physical location date for 
SoSein said value metering device ,f sari 
physical location data is correct. 

11 A method of relocating a value metering device 
haS communications capability, compns.ng. 

causing said value metering device to establish 
SmStionswitharemotedata center; 
SSTser entering into said value metenng 
See order rientifying data -a"**"* 
said user ordering said value metering d^ice 



14 



27 



EP0 825 566 A2 



and user account identifying data; 
said value metering device communicating to 
said data center said order data and said user 
account identifying data; 

said data center verifying said order identifying s 
data and said account identifying data as being 
valid; 

said data center determining if a request for 
physical location move for said value metering 
device to a new location is pending; 10 
said data center upon determining that said 
order identifying data and said account identify- 
ing data are valid and an active physical loca- 
tion move for said value metering device is 
pending, communicating to said value metering 15 
device new physical location data. 

12. A method of relocating a value metering device as 
defined in claim 11 wherein said value metering 
device is a postage metering device. 20 

1 3. A method of relocating a value metering device as 
recited in Claim 1 1 or 12 further comprising, 

displaying said physical location data in a dis- 25 
play of said value metering display; 
said user operating said value metering device 
to accept said new physical location data for 
storage in said value metering device if said 
physical location data is correct. 30 

14. A method of relocating a value metering device as 
defined in claim 1 1 , 12 or 13 further comprising: 

storing said new physical location data at said 35 
data center; 

causing said value metering device to establish 
subsequent communications with said data 
center; 

said value metering device communicating to 40 
said data center said physical location data 
stored is said value metering device; and, 
said data center determining if said physical 
location data has been correctly stored in said 
value metering device. 45 

15. A value metering device constructed and arranged 
to operate according to the method of any one of 
the preceding claims. 

so 
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